Disclosed Chromium Security Bugs

CHECK failure: shared(isolate).IsSharedFunctionInfo() in objects-debug.cc

#40060819Reporter: cl...@chromium.org
$0
12/22/2022

Crash in Builtins_JSEntryTrampoline

#40060854Reporter: cl...@chromium.org
$0
12/22/2022

CHECK failure: map.IsMap(cage_base) in new-spaces.cc

#40060857Reporter: cl...@chromium.org
$0
12/22/2022

Trap in v8::internal::Isolate::PushStackTraceAndDie

#40060858Reporter: cl...@chromium.org
$0
12/22/2022

Crash in Builtins_StringEqual

#40060860Reporter: cl...@chromium.org
$0
12/22/2022

Segv on unknown address in v8::internal::IsolateData::cage_base

#40060985Reporter: cl...@chromium.org
$0
12/22/2022

DCHECK failure in descriptors.GetDetails(index).representation().IsDouble() in maglev-graph-builde

#40060745Reporter: cl...@chromium.org
$0
12/20/2022

DCHECK failure in is_loadable() in maglev-ir.h

#40060746Reporter: cl...@chromium.org
$0
12/20/2022

DCHECK failure in (heap) != nullptr in heap-write-barrier-inl.h

#40060775Reporter: cl...@chromium.org
$0
12/20/2022

DCHECK failure in (prediction) == nullptr in frames.cc

#40060818Reporter: cl...@chromium.org
$0
12/20/2022
Showing 5141-5150 of 10831 bugs